{"schema":"threatline.record/2","record":{"id":"CVE-2026-93219","aliases":[],"summary":"clocksource/drivers/timer-sun4i: Advertise a real minimum delta","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nclocksource/drivers/timer-sun4i: Advertise a real minimum delta\n\nsun4i_clkevt_next_event() compensates for the timer stop/start\nsynchronization delay by programming evt - TIMER_SYNC_TICKS into the\nhardware interval register. The clockevent device currently advertises\nTIMER_SYNC_TICKS as min_delta_ticks, so the clockevents core is allowed\nto call set_next_event() with evt == TIMER_SYNC_TICKS.\n\nThat programs a zero-tick interval. With oneshot/highres/nohz timer\noperation this can leave the next event stuck, which was observed as a\nboot hang on Allwinner D1 after the clockevents core started reusing\nforced minimum-delta events.\n\nAdvertise one extra tick instead, so the smallest event accepted by the\ncore still programs at least one hardware tick after the synchronization\ncompensation.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93219","source_modified_at":"2026-10-19T09:07:31.003Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","lessThan":"0cc4b14d7401d50e53a01f1554147ee075ee6943","status":"affected","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","lessThan":"53a3bc024b8e5d284468cce84957cded5f859f98","status":"affected","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","lessThan":"753a220084dfc4d737f2ab9eaddc9a01a397edd7","status":"affected","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","lessThan":"ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44","status":"affected","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","lessThan":"151eb52f8712017c8f7b00bb2305e8916cb9e3dc","status":"affected","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","lessThan":"bf38be01d43c4e4ca903aff7236d8486a950a252","status":"affected","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","lessThan":"f0efafcdf6eec1f3361bfd8c811420198f55c8bb","status":"affected","versionType":"git"},{"version":"12e1480bcb4920c1b02b3793cb48756497919a60","lessThan":"d21808328225ab8cee46885bf9a0dffcefbe630e","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93219","source_modified_at":"2026-10-19T09:07:31.003Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"3.13","status":"affected"},{"version":"0","lessThan":"3.13","status":"unaffected","versionType":"semver"},{"version":"5.10.270","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.221","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.188","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.157","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.109","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.50","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.4","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93219","source_modified_at":"2026-10-19T09:07:31.003Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"0cc4b14d7401d50e53a01f1554147ee075ee6943","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93219","source_modified_at":"2026-10-19T09:07:31.003Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"53a3bc024b8e5d284468cce84957cded5f859f98","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93219","source_modified_at":"2026-10-19T09:07:31.003Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"753a220084dfc4d737f2ab9eaddc9a01a397edd7","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-93219","source_modified_at":"2026-10-19T09:07:31.003Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"151eb52f8712017c8f7b00bb2305e8916cb9e3dc","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00176,"percentile":0.06835,"score_date":"2026-10-23"},"published_at":"2026-09-24T15:10:42.900Z","modified_at":"2026-10-19T09:07:31.003Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-93219","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:07:31.003Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-93219","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/0cc4b14d7401d50e53a01f1554147ee075ee6943"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/53a3bc024b8e5d284468cce84957cded5f859f98"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/753a220084dfc4d737f2ab9eaddc9a01a397edd7"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/ebba4d0aeba0e8eb3a9676380fc2652de8ab1c44"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/151eb52f8712017c8f7b00bb2305e8916cb9e3dc"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/bf38be01d43c4e4ca903aff7236d8486a950a252"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/f0efafcdf6eec1f3361bfd8c811420198f55c8bb"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/d21808328225ab8cee46885bf9a0dffcefbe630e"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:07:31.003Z","content_hash":"3368fc978faad517d69be0c53565f2b3490507ca5f447b0f97e5c7ba36b09a73"}}